88rb Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") sets out how 88rb ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the 88rb website and associated services, including online casino games, sports betting, live dealer products, bonus programmes, and customer support.

88rb is committed to handling all personal data responsibly and in accordance with applicable data protection principles. This Policy is designed to give you a clear and complete picture of your privacy rights and our obligations as a data controller. We encourage you to read this Policy in full before registering an account or submitting any personal information to the platform.

This Policy forms part of the overall agreement between you and 88rb and should be read alongside the Terms & Conditions and the Responsible Gaming policy. By registering an account or continuing to use the 88rb platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.

If you have any questions about this Policy or how your data is handled, please contact our support team at the address provided in Section 14 of this document.

88rb collects personal data that is necessary to provide a secure, compliant, and functional gaming service. The categories of data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming intervention (such as a self-exclusion request) and only with your explicit consent in that context.

88rb collects personal data through the following methods and touchpoints across the platform lifecycle:

• Direct submission: Information you provide when completing the account registration form, submitting KYC verification documents, contacting customer support, or filling in any other form on the platform.
• Automated collection: Technical and usage data collected automatically when you access the platform, including IP address, device identifiers, browser type and version, pages accessed, and session activity logs. This is collected via server logs, cookies, and similar tracking technologies (see Section 7).
• Payment providers: Transaction reference data shared with 88rb by payment processors such as bKash, Nagad, Rocket, and supported banking partners when a deposit or withdrawal is initiated.
• Identity verification partners: Data returned by third-party KYC and identity verification service providers when we process your verification documents. These providers confirm document authenticity and identity match; they do not store your data on our behalf beyond what is required for verification.
• Fraud and security services: Risk signals and device fingerprint data provided by fraud detection partners used to protect your account and the platform from unauthorised access and financial crime.

88rb does not purchase personal data from data brokers or any other third-party data suppliers. All data we hold has been collected through one of the above legitimate channels in connection with your direct use of the platform.

88rb uses the personal data we collect solely for purposes that are directly connected to operating the platform and fulfilling our obligations to you as a player. The specific purposes for which your data is used are:

• Account creation and management: Setting up your player account, verifying your identity and age (21+), and maintaining your account in a secure and functional state throughout its lifecycle.
• Transaction processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banking channels, and maintaining accurate financial records associated with your account.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and communicating important account-related notices to you via your registered contact details.
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent transactions, money laundering activity, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, applying account restrictions where requested, and communicating with you about responsible gaming tools available on the platform.
• Legal and regulatory compliance: Maintaining records required for compliance with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable legal obligations. Sharing data with authorities where required by law.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the platform's performance, game selection, user interface, and overall player experience.
• Promotional communications: Sending you information about bonuses, promotions, and platform updates, but only where you have opted in to receive marketing communications. You may opt out at any time by contacting our support team.

88rb does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on you, except in the context of fraud detection where automated risk signals may trigger a temporary account review pending manual investigation.

88rb processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: The majority of data processing activities are necessary to perform the contract between you and 88rb — specifically, to operate your account, process transactions, and deliver the gaming services you have signed up for. Without this processing, we cannot provide the platform services.
• Legal obligation: Certain processing activities are required by applicable law, including identity verification for KYC compliance, transaction record-keeping for AML and CTF regulations, and reporting obligations to relevant authorities. This processing is mandatory regardless of consent.
• Legitimate interests: 88rb processes some data on the basis of legitimate interests, including fraud prevention, platform security monitoring, and the investigation of prohibited conduct. In each case, we have assessed that our legitimate interest is not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not required by contract or law, and where it is not covered by our legitimate interests, we will ask for your explicit consent before proceeding. This applies primarily to optional marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

88rb may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your financial transactions. These providers are independent data controllers for their own services.
• Identity verification providers: Third-party KYC service providers used to verify your identity documents and confirm age eligibility. These providers process only the minimum data required to return a verification result.
• Fraud detection and security partners: Specialist providers who assist in detecting account fraud, money laundering, and other security threats. They receive technical and behavioural data to generate risk assessments.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Red Tiger, Habanero, and other studios may receive your account identifier and session token to deliver game content. They do not receive your full identity or financial data.
• Legal and regulatory authorities: Competent government bodies, law enforcement agencies, or courts where we are required by law to disclose information — for example, in response to a valid court order or an AML reporting obligation.
• Professional advisors: Legal counsel, auditors, and compliance consultants who require access to data in the course of providing professional services to 88rb, subject to strict confidentiality obligations.

Where we engage third-party processors (parties that process data on our behalf rather than for their own purposes), we ensure that appropriate data processing agreements are in place that require those parties to handle your data only in accordance with our documented instructions and to maintain equivalent security standards.

88rb uses cookies and similar tracking technologies to deliver a functional and secure platform experience. A cookie is a small text file placed on your device by the platform server when you visit the site. Cookies do not contain executable code and cannot access other files on your device.

The types of cookies used by 88rb are:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing identifiers. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and last-visited game categories, to improve your experience across sessions.
• Analytical cookies: Used to collect aggregated, anonymised data about how players interact with the platform — including pages visited, session duration, and error logs — to help us identify and fix issues and improve the overall experience.
• Security cookies: Used in conjunction with our fraud detection systems to identify unusual device behaviour, flag bot activity, and protect player accounts from unauthorised access attempts.

88rb does not use third-party advertising or retargeting cookies. We do not allow external advertising networks to place tracking cookies on the 88rb platform.

Most web browsers allow you to manage cookie preferences through browser settings. You may configure your browser to refuse some or all cookies; however, disabling strictly necessary cookies will impair your ability to use the platform, including logging into your account.

88rb retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration that your account remains active and in a normal operational state.
• Closed account data: Following voluntary or involuntary account closure, identity, financial, and transaction records are retained for a minimum of 5 years from the date of closure to comply with AML, CTF, and general financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Customer support correspondence: Retained for 3 years from the date of the final communication in a support thread, or longer if the communication is connected to an ongoing dispute or legal proceeding.
• Technical and usage logs: Typically retained for 12 months from the date of generation for security monitoring purposes, after which they are deleted or permanently anonymised.
• Marketing consent records: Retained for the duration of your consent plus 3 years following withdrawal of consent, to demonstrate compliance with consent-based marketing obligations.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Where anonymisation is not technically feasible, the data is securely destroyed.

If you request deletion of your data before the end of a mandatory retention period, we will explain which categories of data must be retained for legal compliance reasons and which can be deleted immediately. We will action the deletion of all non-mandatory data within 30 days of a valid deletion request.

88rb applies a layered, defence-in-depth approach to the security of all personal data held on the platform. The technical and organisational measures we maintain include:

• SSL/TLS encryption in transit: All data transmitted between your device and the 88rb platform is encrypted using industry-standard SSL/TLS protocols. The padlock indicator in your browser confirms that your connection to 88rb is encrypted.
• Encryption at rest: Sensitive data stored in our systems — including financial data and identity verification records — is encrypted at rest using current-standard encryption algorithms.
• Access controls: Access to personal data within 88rb's systems is restricted on a strict need-to-know basis. Staff members can only access the minimum data necessary to perform their specific role. All access is logged and subject to regular audit review.
• Two-factor authentication (2FA): Internal system access for platform administrators and support staff requires multi-factor authentication. Players are also encouraged to enable available account security features.
• Penetration testing and vulnerability management: 88rb conducts regular security assessments to identify and remediate vulnerabilities in the platform before they can be exploited.
• Incident response: 88rb maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights, we will notify affected players as promptly as operationally possible and take immediate steps to contain the breach.

While 88rb implements robust security measures, no digital system can guarantee absolute security. You are also responsible for maintaining the security of your own device, browser, and account credentials. Do not share your 88rb password with any person, and use a unique, strong password that is not reused across other platforms.

As an individual whose personal data is processed by 88rb, you hold the following rights in relation to that data. To exercise any of these rights, please contact our support team using the details in Section 14. We will respond to all valid rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data 88rb holds about you, along with information about how it is used and with whom it is shared. This is commonly referred to as a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Please notify us as soon as you become aware of any inaccuracy in your account data.
• Right to erasure: Also known as the "right to be forgotten", this right allows you to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate basis for its retention. Note that certain data must be retained for legal compliance reasons as described in Section 8, and erasure requests cannot override those mandatory retention obligations.
• Right to restrict processing: In certain circumstances — such as where you contest the accuracy of data, or where you have objected to processing pending investigation — you may request that we temporarily restrict how your data is used while the matter is resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format, and request that it be transferred to another controller where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of our legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time, without needing to provide a reason.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that occurred prior to withdrawal.

88rb will not charge a fee for processing a rights request unless the request is manifestly unfounded or excessive. In those circumstances, we may charge a reasonable administrative fee or decline to respond, and we will notify you of the reason.

88rb's platform and all associated services are strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to any person under the age of 21.

Age verification is a mandatory step in the account registration process, and 88rb reserves the right to request documentary proof of age at any point during the account lifecycle. Where we have reason to believe that an account is being operated by or on behalf of a person under 21, the account will be suspended immediately pending investigation. If the account holder is confirmed to be under 21, the account will be permanently closed and all data associated with that account will be securely deleted in accordance with applicable legal obligations.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account with 88rb or has accessed the platform using your credentials, please contact our support team immediately. We will investigate and take appropriate action as a matter of priority.

The 88rb platform may from time to time display references to third-party services — for example, payment provider names or game studio product descriptions. Where any such reference includes a navigable link, clicking that link will take you to a website that is operated independently by the third party and is not under 88rb's control.

88rb is not responsible for the privacy practices, data collection policies, security standards, or content of any third-party website. This Privacy Policy applies exclusively to the 88rb platform. We strongly recommend that you review the privacy policy of any third-party service before submitting personal data to that service.

The inclusion of a reference to a third-party service within the 88rb platform does not constitute an endorsement, recommendation, or warranty of that service's data handling practices.

88rb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the platform. When material changes are made to this Policy, we will take reasonable steps to notify registered players — which may include a notice displayed on the platform upon login or a message sent to your registered contact details.

The effective date shown at the top of this document indicates when the current version of this Policy came into force. We recommend that you review this page periodically to remain informed of how we handle your personal data. Your continued use of the 88rb platform after the effective date of an amended Policy constitutes your acknowledgement of the revised terms.

If you object to any change in this Policy, please discontinue use of the platform and contact our support team to request voluntary account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 88rb holds about you — including Subject Access Requests, data deletion requests, or consent withdrawal — please contact our support team. We handle all data-related correspondence in English.

Contact address: [email protected] (plain text — not a clickable link). Please include your registered account username, the nature of your request, and any relevant reference information. We aim to acknowledge all data-related requests within two business days and to resolve them fully within 30 calendar days.

For responsible gaming enquiries, self-exclusion requests, or deposit limit applications, please mark your message as urgent. These requests are treated as a priority and actioned within one business day wherever possible.